monitor-training-with-tmux
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runintmux_wait.pyandSKILL.mdto executetmux list-panes, checking the status of active processes within a session.- [COMMAND_EXECUTION]: The skill instructions inSKILL.mdinvolve executing system diagnostic commands such asnvidia-smi,free -h,df -h, anddmesg | tail -50to gather environment context when anomalies are detected.- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests and analyzes data from external sources (tmux session logs). - Ingestion points: The skill captures up to 2000 lines of tmux session history using
tmux capture-pane -t <session> -p -S -2000. - Boundary markers: No boundary markers or delimiters are specified to separate the captured logs from the agent's instructions.
- Capability inventory: The skill has the capability to execute system commands and suggest fixes based on log analysis.
- Sanitization: There is no evidence of sanitization or filtering of the captured logs before they are processed by the agent.
Audit Metadata